Version RecordIndependent release archive
Menu

Release record

iOS 4.0.2

Full article
Public release
Recorded milestones
1
Beta cycle
—
Average interval
—
Public release
Aug 11, 2010

Release notes

Overview

Editorial synthesis with inline references and a source ledger when citations are available.

Apple’s dedicated advisory identifies two corrections in iOS 4.0.2. One added bounds checking to FreeType’s handling of embedded CFF font instructions, where a malicious PDF could execute code.[1]

The second correction tightened IOSurface property validation to prevent code already running as the user from exploiting an integer overflow to gain system privileges. Apple’s 2010 index dates the release to August 11, 2010.[2][3]

Source ledger

References

Sources are linked to the claims they support. Publication and access dates are shown when available.

  2. Apple security updates (2010)

    Apple Support · 2026-07-30 · iOS 4.0.2 — 11 Aug 2010

    Back to text ↑
  4. About the security content of the iOS 4.0.2 Update for iPhone and iPod touch

    Apple Support · 2026-07-30 · iOS 4.0.2 security content

Documented & observed

Changes in this version

Source-linked features, fixes, known issues, removals, and community-observed behavior recorded across this version’s appearances and verified builds.

Release changes

Changed in this release

Features, fixes, removals, and regressions first observed in this release record.

Milestones

Release history

Every recorded channel appearance in chronological order. Open an appearance for any available build, scope, notes, and sources.

  1. Public release

    Public

    Full articleEditorially verified

    iOS 4.0.2 was a focused security update that repaired a crafted-PDF font vulnerability and an IOSurface privilege-escalation path.

    Availability
    available
    Sources
    4 linked
    Open this appearance

Historical context

Cycle comparison

Pace, intervals, and duration compared with earlier releases on the same platform.

Official release notes